Google has decided to remove SMS verification in Gmail and replace it with a QR code-based system. This change is part of a strategy aimed at improving the security, of their services and reduce the risks arising from the use of text messages in authentications, such as phishing and SIM swapping attacks.
Two-step authentication has been a key security measure to protect access to online accounts, but the SMS-based system presents vulnerabilities that cybercriminals have been able to exploit. By eliminating this method, Google is following in the footsteps of other technology companies seeking to implement more robust solutions and less susceptible to attacks.
Why Google is abandoning SMS verification
The use of text messages as a second authentication factor has become a common attack path for cybercriminalsThe SS7 protocol, on which SMS is based, is an obsolete technology that has proven to be vulnerable to different forms of interception.
In addition, the increasing number of incidents of identity impersonation and account theft has prompted companies to adopt more secure authentication methods. Among the most common attacks is SIM swapping, in which criminals duplicate the password of a user's account. SIM card of the victim to receive their messages and access their accounts.
How QR code verification will work
Instead of receiving a six-digit code via text message, users will be required to scan a QR code using your mobile phone's camera. This change will allow verification to be carried out more easily. safe, without relying on a phone number that can be cloned or intercepted.
The process will be similar to that already used on other platforms, where users must scan a QR code with their authentication app or the camera on their device to confirm their identity. With this measure, Google seeks to reduce exposure to phishing attacks, since a QR code is more difficult to spoof or intercept than a simple text message.
Benefits of the new verification system
Google believes that this change will improve user safety and will facilitate secure access to your accounts. Some of the key benefits of the new QR code authentication include:
- Greater protection against attempts of identity impersonation (phishing).
- Eliminating the use of SMS, a technology vulnerable to attacks.
- Greater ease and convenience for users when logging in.
- Reduction in cases of account thefts via SIM swapping.
Google has been exploring different alternatives for some time to improve the security of its services and Reduce reliance on passwordsThe implementation of QR codes is a new step in this direction, joining other initiatives such as the use of Passkeys and passwordless authentication systems.
Implementation date and next steps
This transition will be carried out in a gradual in the coming monthsGoogle has not yet specified an exact date for the global rollout, but has confirmed that the SMS-based verification process will be progressively replaced by the QR code scanning.
A company spokesperson said that more details about this change will be provided in the future, so users should keep an eye on official Google announcements to find out how it will affect their accounts and what steps they will need to take to adapt to this new form of verification.
With this change, Gmail will take another step towards its goal of improving the security of its accounts and protecting users from increasingly common threats. SophisticatedAs the use of traditional passwords decreases, QR code authentication is emerging as a more secure and reliable alternative.